General
- Target 2026-09-29_1b056e4ad3b7353e22fceca4903d0218_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- Sample260930-fgplfat17r
- SHA256 6ba3a5076b37319f32743468e5d2efe53aadb5bbe208f61fe3fb9bc2ea2e85d4
- MD5 1b056e4ad3b7353e22fceca4903d0218
- SHA1 3a1d3a918aac5d1dad3aeae857f153d4a3950b20
- SHA512 03abb4870f3ff55c3dca576f6a45a84795e4ec43cdc87af4295cc5f774b11b460a9bb07d5b3344742409844a6cefbf75a4c9f791e892f7816d041a48e53c17e2
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFD+rlBu0R+J5JlLgPYfq8ZF02IlLZDr0nXea24:6i4lZiox+fu0R+J5JlLgPbDr0nn24
- TLSH T14FB47D1379C18431F7720E3404A297F57E7EFD20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_1b056e4ad3b7353e22fceca4903d0218_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_1b056e4ad3b7353e22fceca4903d0218_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hi.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_1b056e4ad3b7353e22fceca4903d0218_amadey_avoslocker_cobalt-strike_conti_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 496KB
- SHA256 6ba3a5076b37319f32743468e5d2efe53aadb5bbe208f61fe3fb9bc2ea2e85d4
- MD5 1b056e4ad3b7353e22fceca4903d0218
- SHA1 3a1d3a918aac5d1dad3aeae857f153d4a3950b20
- SHA512 03abb4870f3ff55c3dca576f6a45a84795e4ec43cdc87af4295cc5f774b11b460a9bb07d5b3344742409844a6cefbf75a4c9f791e892f7816d041a48e53c17e2
- SSDEEP 6144:y7WQ0j4ltziolIGlnE2dFD+rlBu0R+J5JlLgPYfq8ZF02IlLZDr0nXea24:6i4lZiox+fu0R+J5JlLgPbDr0nn24
- TLSH T14FB47D1379C18431F7720E3404A297F57E7EFD20196AA99B23C8762E5E312C3561A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE